Home
Configuring
Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
Configuring directory services
This section describes how to plan, set up, and use HCL Domino® directory services.
Directory Sync
Directory Sync allows you to sync people and group data from an external LDAP directory into the Domino® directory. Currently data from Active Directory can be synced.
Changing the Directory Sync configuration
To change the Directory Sync configuration, disable Directory Sync, edit the Directory Sync Configuration document, and then enable Directory Sync again.

Configuring
Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
- Configuring a network
  This section presents the planning concepts and setup procedures necessary for a successful HCL Domino® deployment over a network. It provides information on network protocols from a Domino perspective but does not attempt to provide general network information.
- Configuring users and servers
  Topics in this section describe how to set up users and servers.
- Editing the NOTES.INI file
  You should rarely, if ever, need to modify a server's or client's NOTES.INI file. The NOTES.INI file contains many settings that Domino® and Notes® rely on to work properly. An accidental or incorrect change may cause Domino or Notes to run unpredictably. Therefore, you should edit the NOTES.INI file only if special circumstances occur or if Support recommends that you do so.
- Configuring directory services
  This section describes how to plan, set up, and use HCL Domino® directory services.
  - The Domino® Directory
    The Domino® Directory, which some previous releases referred to as the Public Address Book or Name and Address Book, is a database that Domino creates automatically on every server. The Domino Directory is a directory of information about users, servers, and groups, as well as custom entries you may add. Registering users and servers in a domain automatically creates corresponding Person documents and Server documents in the Domino Directory for the domain. These documents contain detailed information about each user and server.
  - The LDAP service
    Lightweight Directory Access Protocol (LDAP) is a standard Internet protocol for searching and managing entries in a directory, where an entry has one or more attributes associated with a distinguished name. A distinguished name -- for example, cn=Phyllis Spera,ou=Sales,ou=East,o=Renovations -- is a name that identifies an entry within a directory tree.
  - LDAP schema
    A directory entry contains information about a particular entity, or object -- for example, a person or a group -- and is associated with a distinguished name. An LDAP schema is a set of rules that define what can be stored as entries in an LDAP directory. Each LDAP directory has a default schema, which organizations can customize, or "extend," by adding elements to it. The elements of a schema are attributes, syntaxes, and object classes. LDAP directory servers provide the ability to enforce the schema to ensure that directory changes made using LDAP operations conform to it.
  - ldapsearch utility
    Domino® and Notes® provide a command-line search utility, LDAPSEARCH.EXE, that you use to search entries in any LDAP directory. The ldapsearch utility connects to a directory server and returns results that match search criteria you specify. It is available on Domino server and Notes client platforms.
  - Directory assistance
    Directory assistance allows a server to look up information in a directory other than a local primary Domino® Directory (NAMES.NSF).
  - Directory Sync
    Directory Sync allows you to sync people and group data from an external LDAP directory into the Domino® directory. Currently data from Active Directory can be synced.
    - Configuring Directory Sync
      Complete the following steps to configure Directory Sync.
    - Creating a Directory Assistance document enabled for Directory Sync
      The first step to configure Directory Sync is creating a Directory Sync-enabled Directory Assistance document in the directory assistance database.
    - Creating a Directory Sync Configuration document
      After you create a Directory Assistance document that is enabled for Directory Sync, create a Directory Sync Configuration document in the Domino® directory. You use this document to select Directory Sync configuration options and then to enable Directory Sync.
    - Renaming Domino® users when their names change in Active Directory
      When you use Directory Sync and the common name of a registered Domino® user changes in Active Directory, follow this procedure to change the name in the Domino directory Person document, too.
    - Registering Active Directory users in Domino®
      When you use Directory Sync, you can register Active Directory users in Domino® to create mail files and Notes® IDs for them.
    - Deleting users and groups
      When users or groups are deleted in Active Directory, they are also deleted in the Domino® directory when a full resync is done. One exception is that Active Directory users who are registered in Domino through user registration are not deleted from Domino.
    - Changing the Directory Sync configuration
      To change the Directory Sync configuration, disable Directory Sync, edit the Directory Sync Configuration document, and then enable Directory Sync again.
    - Resyncing all data
      You can resync all of the Active Directory data.
    - Monitoring Directory Sync
      Use the following methods to monitor Directory Sync, in addition to monitoring the output of Directory Sync (Dirsync) at the server console and in log.nsf.
  - Directory catalogs
    A directory catalog is an optional directory database that typically contains information aggregated from multiple Domino® directories. Clients and servers can use a directory catalog to look up mail addresses and other information about the people, groups, mail-in databases, and resources throughout an organization, regardless of the number of Domino domains and Domino Directories the organization uses.
  - Extended ACL
    An extended access control list (ACL) is an optional directory access-control feature available for a directory created from the PUBNAMES.NTF template -- a Domino® Directory or an extended directory catalog. An extended ACL is tied to the database ACL, and you access it through the Access Control List dialog box using a Notes® or Domino Administrator client.
  - Setting up Domino® Active Directory synchronization (Deprecated)
    When the Domino® server is installed on a Microsoft™ Windows™ 2003 server, as an administrator, you typically need to maintain two separate directories for the same set of people and groups. Maintaining user and group information involves adding entries to both directories, deleting entries, ensuring that passwords are the same when users use Notes® Single Logon, coordinating group membership in both directories, and ensuring that user or group settings, such as email addresses and telephone numbers, are identical.
- Configuring messaging
  This section provides an overview of messaging and describes how to set up mail routing, how to set up and customize mail servers, and how to track mail.
- Configuring iNotes®
  HCL iNotes® provides HCL Notes® users with browser-based access to Notes mail and to Notes calendar and scheduling features. Administrators specify mail policy and security policy settings as well as notes.ini file settings to complete the full implementation of HCL iNotes.
- Configuring Web servers
  This section describes how to set up the HCL Domino® Web server, and the Domino Web Navigator.
- Setting up a cluster
  Setting up a cluster includes the tasks of creating and verifying that it is working correctly, and then setting up user access, mail, replications, size quotas, directory assistance, roaming, web navigation, and use of a private LAN in the cluster.

Changing the Directory Sync configuration

To change the Directory Sync configuration, disable Directory Sync, edit the Directory Sync Configuration document, and then enable Directory Sync again.

Procedure

Open the Domino® directory.
Select Configuration > Directory > Directory Sync.
Select the Directory Sync Configuration document that you want to change.
Click the Disable button.
Wait for the view to show that it's been disabled. Typically this occurs within 30 seconds to a minute.
Make your changes to the Directory Assistance Configuration document.
At the top of the document, click Enable.
You see the following prompt:
```
Begin sync now or run in test mode?
```
Choose one of the following options:
- Synchronize data
- Run in test mode (log to console, don't update data)
Select Run in test mode to simulate the actions that Directory Sync would take but without changing any Domino® data. Make any adjustments needed to the Directory Sync configuration. When you are ready to enable synchronization for real, select Synchronize data.